Re: xennet input processing and mac filtering

[Greg Troxel <gdt%lexort.com@localhost>]

Manuel Bouyer <bouyer%antioche.eu.org@localhost> writes:

> I think the frontend code assumes that ether_input() will do the filtering,
> and maybe this has changed since the frontend was written

I was also thinking this has changed.

I think that a machine (including a virtual machine) when processing
incoming ethernet frames, has to discard frames (from the stack, not
bpf) if the dst mac is not one of
  broadcast
  ours
  multicast (or maybe, multicast we have asked for)

While I see the point that ideally the dom0 should not send packets not
intended for the domU, this can happen with bridges with unprimed
tables, and in general could happen.

I'll see if I can page in the if_input processing.